Privacy Policy

Who We Are

PICKURPAGE LLP (“PICKURPAGE”, “we”, “us”, or “our”) is an India-based Limited Liability Partnership that develops and operates Jhunkoo.ai (“Jhunkoo”), a software-as-a-service (SaaS) platform that enables individuals and businesses to create and deploy AI agents using built-in tools, APIs, and Retrieval-Augmented Generation (RAG) capabilities.

In this Privacy Policy, “Jhunkoo”, “we”, “us”, and “our” refer to Jhunkoo.ai and, where applicable, to PICKURPAGE LLP as the entity responsible for providing the Services and processing personal data.

What Is This?

This is our Privacy Policy. We created it to be transparent about how we collect, use, manage, and store your information when you interact with our services.

Whenever we say “you” or “your,” we’re talking about users of our services—whether individuals or organizations. Our “services” include our platform, websites, features, APIs, chat widgets, and any associated content, products, or software.

Why Are We Showing You This?

We value and respect your privacy. Our aim is to use your data in ways that enhance your experience without compromising your trust. If you have feedback or concerns, email us at [email protected].

This Privacy Policy should be read in conjunction with our Terms of Service .

Whose Data This Policy Covers

Jhunkoo handles personal data in two distinct roles, and it matters which one applies to you:

Account holders. If you sign up for Jhunkoo, create agents, and manage a workspace, we are the controller of your account data. Everything in this policy applies to you directly.
End users of a customer’s agent. If you are chatting with an AI agent that a Jhunkoo customer has deployed on their website, then generally that customer is the controller of the conversation and of any details you provide, and Jhunkoo acts as a processor on their instructions. The roles that actually apply in a given case depend on the processing concerned and on applicable law. For questions about how your data is used, retained, or deleted in that context, contact the business operating the agent. We will support them in responding to your request, and we will act on your request directly where the law requires us to.

Information We Collect

Personal Information We Collect

We collect personal data to operate our platform and improve your experience. This includes:

Full name
Email address
Company or organization information
Billing details (name and billing email; payment details are handled by our payment provider — see below)
IP address
Browser and device information
Timestamps and session data
Page views and interaction metrics
Content you upload or connect as agent knowledge, and its metadata

Aggregated or Technical Information

We may also collect aggregated or technical information, such as:

Operating system, language, browser type
Device specifications
Referrer URLs
Usage patterns (e.g., navigation paths, load times)

Billing Information

Billing details may differ from your account details. The email address on your Jhunkoo account is not necessarily the email address associated with your billing record, and updating one does not update the other. Payment card and billing-address details are collected by our payment provider directly at checkout. We do not store payment card details on our systems.

User Content and AI Inputs

Depending on the features you use, we process information you or your end users provide to the Services, including:

Knowledge base content — documents and files you upload, and web pages you ask us to ingest as agent knowledge.
Agent configuration — personas, instructions, retriever descriptions, and API tool definitions you author.
Prompts and conversations — messages sent to your agents, and the responses your agents generate. Conversations are stored so that you can review them in your dashboard.
Lead and contact details — where you have enabled lead capture, information an end user provides during a conversation, such as name, email address, phone number, approximate location derived from the request, and any custom fields you have configured.
Derived data — vector embeddings generated from your knowledge base content so that your agents can retrieve relevant passages.

We use this content to provide the functionality you have requested, to operate and secure the Services, and to maintain, debug, and improve the Services.

Jhunkoo does not use your content, your end users’ conversations, or your uploaded documents to train its own AI models, and we do not sell this content.

Third-party AI processing. Depending on the models and features you select, this content may be transmitted to third-party AI providers in order to generate responses or embeddings. Those providers may process it in accordance with their own terms and policies, and we do not control the independent data practices of third-party providers. The providers we currently route to are identified under Who We Share Your Data With below.

How We Use Your Information

We use your information for the following purposes:

To deliver and maintain our services
For authentication and access control
To process payments (via our third-party payment provider)
To improve service performance and user experience
For support and user communication
For analytics, research, and product development
For security, abuse detection, and fraud prevention
For marketing and promotional messages (with opt-out option)

Usage Limits & Fair Use Policy

To ensure the platform remains performant and accessible for all users:

We reserve the right to enforce rate limits or cap usage of APIs or processing features if automated or excessive usage is detected.
Users on free or limited plans may experience throttling or priority degradation compared to paid users.
Abusive use (e.g., scraping, spam generation, unauthorized resale) may lead to account suspension or permanent termination.
We may revise fair usage thresholds and notify you in advance via email or platform announcements.

We share data only as necessary with service providers that support authentication, hosting and infrastructure, storage, AI and machine-learning processing, analytics, error monitoring, and payment processing. The providers we currently rely on are:

Authentication (Clerk) – to create and secure accounts and manage sessions.
Hosting and infrastructure (Vercel, Cloudflare, Neon, Upstash) – to host and deliver the Services, store files, cache data, apply rate limits, and run background jobs.
Vector search (Pinecone) – to store embeddings generated from your knowledge base content so your agents can retrieve relevant passages.
AI providers – prompts, retrieved knowledge, and conversation context are sent to the model provider you select for your agent in order to generate a response. Depending on your configuration this may include OpenAI, Anthropic, Google, xAI, DeepSeek, Mistral, or Moonshot AI, accessed through the Vercel AI Gateway. Embeddings are generated using OpenAI models.
Agent tool providers – when your agent uses a built-in tool, the relevant part of the query is sent to that tool’s provider. This may include web search (Tavily, Exa, DuckDuckGo), maps and places (Google Maps Platform), currency rates (Frankfurter), weather (wttr.in), and scheduling (Cal.com).
Payment provider (Lemon Squeezy, our Merchant of Record) – for billing, payment processing, invoicing, and receipts. Lemon Squeezy receives your name and billing email address, and collects payment and billing-address details directly from you at checkout.
Analytics (PostHog) – to understand product usage. Analytics cookies are set only if you opt in.
Error monitoring (Sentry) – to capture application errors and diagnostic data (such as IP address, browser/device information, and request metadata) so we can detect, debug, and fix problems.
Content management (Sanity) – to publish and serve our marketing and documentation content.

All third-party providers are bound by their own privacy policies and applicable data processing agreements. This list may change as our infrastructure evolves; we will update this policy when it does.

We may also disclose your information:

To comply with legal obligations or enforce our policies
If our company is involved in a merger, acquisition, or asset sale
To prevent fraud, abuse, or violations of law

Data Retention

We retain your data for as long as your account is active or as needed to comply with legal obligations. Knowledge base content and its derived embeddings are deleted when you delete the corresponding source or agent. Conversation history remains available to the customer operating the agent until they delete it. You may request deletion by contacting us at [email protected].

International Data Transfers

We are based in India, and our service providers store and process data in a number of countries, including the United States and the European Union. Where personal data is transferred outside the country in which it was collected, we rely on the safeguards required by applicable law — including contractual protections with our processors and, where relevant, standard contractual clauses or an equivalent transfer mechanism. We remain responsible for personal data handled on our behalf by these providers.

Your Rights

We are established in India, and our processing of personal data is subject to applicable Indian data protection and privacy laws, including the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025 made under it, to the extent applicable to our processing activities.

Subject to applicable law and to verification of your identity, you may:

Access a summary of the personal data we process about you and the processing activities we carry out, together with the identities of the other data fiduciaries and data processors with whom we have shared it, and a description of what was shared
Correct personal data that is inaccurate or misleading, complete personal data that is incomplete, and update personal data that is out of date
Request erasure of your personal data, unless we are required to retain it for the purpose it was collected for, or in order to comply with a law in force
Withdraw consent where our processing relies on your consent. Withdrawing consent is as straightforward as giving it. Withdrawal takes effect for future processing and does not make unlawful any processing already carried out while consent was in place
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
Opt out of marketing communications at any time
Raise a grievance with us about how we have handled your personal data or your rights

How to make a request

Email [email protected] from the email address registered on your Jhunkoo account, and tell us which right you wish to exercise. If you write from a different address, include your account email address so that we can identify you. Where we cannot otherwise verify who you are, we may ask for further information before acting on the request.

How long we take

We respond to requests to access, correct, complete, update, or erase personal data, and to grievances, within ninety (90) days of receiving them. We aim to resolve most requests well within that period, and we will tell you if we need more information from you before we can act.

Escalating a grievance

If you are not satisfied with how we have handled your grievance, you may escalate it to the Data Protection Board of India. The DPDP Act expects you to raise the matter with us first and give us an opportunity to resolve it before approaching the Board.

If you are outside India

If you are located in the European Economic Area or the United Kingdom, you may have additional rights under the GDPR — including the right to object to or restrict certain processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority. These are GDPR rights; the DPDP Act does not provide a general right to data portability.

If you are an end user of an agent deployed by one of our customers, direct your request to that customer in the first instance, as described under Whose Data This Policy Covers.

Security Measures

We take appropriate security measures to protect your personal data, including:

Data encryption in transit (TLS)
Access controls and internal audits
Monitoring for unauthorized activity
Regular security updates and vulnerability patching

However, no method of data transmission or storage is completely secure.

If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law, and without delay. Our notice to you will describe the nature and extent of the breach, when and where it occurred, its likely consequences for you, the measures we have taken or propose to take to mitigate risk, the steps you can take to protect yourself, and how to reach us with questions.

Minors’ Data

Our services are not intended for individuals under 18. We do not knowingly collect data from minors. If you believe we have unintentionally collected a child’s data, please email us so we can delete it.

Cookies & Tracking

We use cookies and similar technologies to personalize your experience and improve performance. Analytics cookies are optional and are only set if you opt in. You can change your choice at any time using the Cookie Preferences link in the site footer, or manage or block cookies via your browser settings. We also respect Do Not Track (DNT) signals where supported.

Changes to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. When we do, we’ll revise the “Last Revised” date and notify users where appropriate.

Contact Us

For any privacy-related questions, grievances, or concerns, reach out to:
📧 [email protected]
📍 PICKURPAGE LLP, Lucknow, Uttar Pradesh, India

This is the contact point we publish for questions about the processing of your personal data, and the address through which grievances are received and answered.